CVE-2026-109695: WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affects FluentCart: from n/a through 1.7.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress FluentCart pluginto a version that resolves this vulnerability.Fixed in 1.8.0
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates it can be exploited remotely over the network, requires no privileges, and does not require user interaction. The attack complexity is rated low.
What is the impact if exploitation succeeds?
The reported impact is exposure of sensitive information, with high confidentiality impact. No integrity or availability impact is indicated by the supplied CVSS vector.
Which FluentCart versions are affected?
FluentCart versions through 1.7.1 are affected. The lower bound is listed as n/a, so the available data does not identify an unaffected earlier version.